This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa File: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (raw, json) Hash identifier: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4= Subject key identifier: F1:3D:38:23:C4:70:B5:F6:4F:9F:F4:49:95:49:85:F9:FF:F6:2E:18 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0F924160B4A8A2C1B6F3062869BB Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215421 IP address blocks: 46.36.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0f:92:41:60:b4:a8:a2:c1:b6:f3:06:28:69:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13d3823c470b5f64f9ff449954985f9fff62e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:65:2a:ea:e1:ac:b6:9f:c3:c7:26:c2:d7: 12:af:97:5a:ac:e1:4e:10:10:af:00:37:a4:b2:87: 99:9a:f4:49:fa:b0:e8:ce:6a:01:b4:e8:15:e1:2a: 5e:7a:d5:53:b1:d3:d6:40:84:1d:2a:27:e2:47:3f: db:5e:25:e7:d9:3d:39:da:83:ef:ea:5a:1d:5f:d8: 86:bb:26:4f:49:cf:82:41:dd:a4:af:da:db:c0:6d: bd:3a:8b:8b:d0:66:58:69:81:26:b1:e0:7d:1b:be: 14:d0:f7:14:dc:e5:ff:e5:6f:81:da:79:a5:e0:55: 50:57:06:a0:15:25:da:74:5c:fa:29:df:10:9e:e3: 76:25:97:64:e7:81:b9:2c:6d:f7:3a:4f:a9:54:f5: af:02:74:79:94:1d:20:fc:cb:6f:13:f7:e7:a4:7b: a0:5e:a5:2f:70:c0:9a:28:ee:9a:77:9c:c1:87:f1: 92:65:25:8d:28:b6:71:01:c0:bc:f7:52:90:f1:6e: d0:f9:c6:e7:cf:da:a8:e8:99:e6:25:0c:b4:b2:0f: a5:dc:45:9d:18:b1:7c:50:19:83:2d:4e:76:5e:8a: 43:3b:39:e8:af:ad:22:e9:0b:97:80:3f:fe:4f:36: 5c:44:3a:c5:b4:5b:2d:04:45:e8:70:81:59:7b:16: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:38:23:C4:70:B5:F6:4F:9F:F4:49:95:49:85:F9:FF:F6:2E:18 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.122.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:41:ee:04:8b:43:d4:37:73:d2:17:6d:a2:dd:03:72:e6:b1: 49:b1:a1:be:34:b1:2f:ba:88:df:c7:ab:0b:1c:9f:1a:d4:cd: d5:eb:1d:16:c0:fb:77:f0:d0:5a:ed:40:7d:92:6a:aa:e2:83: 2b:b6:ab:c1:1c:bb:e7:05:53:6f:35:3d:ab:48:20:e1:06:45: 84:e5:ac:12:e5:74:2d:6d:c3:3c:fe:28:a9:28:f8:53:ec:d3: c1:7c:1e:a0:0a:e1:8e:91:4a:33:32:b4:f4:c0:ee:4f:fb:73: 65:e7:f3:6f:9e:f4:13:d4:6f:6f:af:10:80:10:d4:0c:a2:58: d9:fb:25:c4:3c:55:4b:80:4d:84:b3:90:54:5e:24:97:66:80: f5:30:ed:5e:ad:29:30:0f:98:3a:79:3c:4c:1b:40:bd:8c:ab: 39:b0:c9:c2:18:89:aa:05:51:48:7f:ed:eb:25:65:73:24:c6: 35:b2:4b:2e:10:35:98:e1:38:58:23:32:4a:b0:fc:b7:8d:8f: 3f:3b:5f:16:4b:a5:92:cf:7e:28:0f:d4:aa:27:cc:6d:c4:99: 29:ee:46:b7:fb:9f:a4:38:54:61:13:cf:d2:28:18:27:42:de: 56:5d:ed:57:11:c0:ad:44:9d:c6:b9:75:74:f1:70:88:8f:fa: e8:2f:16:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww+SQWC0qKLBtvMGKGm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTNkMzgyM2M0NzBiNWY2NGY5ZmY0NDk5NTQ5ODVmOWZmZjYyZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AJlKurhrLafw8cmwtcSr5darOFO EBCvADeksoeZmvRJ+rDozmoBtOgV4SpeetVTsdPWQIQdKifiRz/bXiXn2T052oPv 6lodX9iGuyZPSc+CQd2kr9rbwG29OouL0GZYaYEmseB9G74U0PcU3OX/5W+B2nml 4FVQVwagFSXadFz6Kd8QnuN2JZdk54G5LG33Ok+pVPWvAnR5lB0g/MtvE/fnpHug XqUvcMCaKO6ad5zBh/GSZSWNKLZxAcC891KQ8W7Q+cbnz9qo6JnmJQy0sg+l3EWd GLF8UBmDLU52XopDOznor60i6QuXgD/+TzZcRDrFtFstBEXocIFZexa/EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPE9OCPEcLX2T5/0SZVJhfn/9i4YMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvOFQwNEk4Und0ZlpQbl9SSmxVbUYtZl8yTGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiR6MA0G CSqGSIb3DQEBCwUAA4IBAQBdQe4Ei0PUN3PSF22i3QNy5rFJsaG+NLEvuojfx6sL HJ8a1M3V6x0WwPt38NBa7UB9kmqq4oMrtqvBHLvnBVNvNT2rSCDhBkWE5awS5XQt bcM8/iipKPhT7NPBfB6gCuGOkUozMrT0wO5P+3Nl5/NvnvQT1G9vrxCAENQMoljZ +yXEPFVLgE2Es5BUXiSXZoD1MO1erSkwD5g6eTxMG0C9jKs5sMnCGImqBVFIf+3r JWVzJMY1sksuEDWY4ThYIzJKsPy3jY8/O18WS6WSz34oD9SqJ8xtxJkp7ka3+5+k OFRhE8/SKBgnQt5WXe1XEcCtRJ3GuXV08XCIj/roLxYv -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:33 2026 by rpki-client